Sf.net_Prot Network Communication Data Protection Function; Use Of Web Service Function From Client Computer; Printing And Faxing From Client Computer; Sending By E-Mail From Toe - Ricoh Aficio MP C2800 Manual

7.1.7 SF.NET_PROT
This protects document data and print data in transit on internal networks from leakage, and also detects
attempts at tampering.
Following are explanations of each functional item in " SF.NET_PROT
Data Protection Function" and their corresponding security functional requirements.
7.1.7.1

Use of Web Service Function from Client Computer

Whenever it receives a request from a client computer for use of the Web Service Function, the TOE
communicates with the client computer using the SSL protocol to create a trusted path.
By the above, FTP_TRP.1 (Trusted path) is satisfied.
7.1.7.2

Printing and Faxing from Client Computer

Whenever it receives a request from a client computer for printing or transmitting faxes, the TOE
communicates with the client computer using the SSL protocol to create a trusted path.
By the above, FTP_TRP.1 (Trusted path) is satisfied.
7.1.7.3

Sending by E-mail from TOE

When sending document data by e-mail to a client computer, the TOE attaches the document data to e-mail
and sends the e -mail using S/MIME. The S/MIME destination information is registered as S/MIME user
information within general user information. Users can send e-mail referring to the registered destination
details only.
By the above, FTP_TRP.1 (Trusted path) is satisfied.
7.1.7.4

Delivering to Folders from TOE

When sending (delivering) data to folders on SMB or FTP server, the TOE connect s to the server using the
IPSec protocol to create a trusted channel. The destination information for the Deliver to Folders function is
registered in advance and managed by the TOE as machine control data. Users can send files referring to the
registered folder information only.
By the above, FTP_ITC.1 (Inter - TSF trusted channel) is satisfied.
7.1.8 SF.FAX_LINE
When it receives fax data from the telephone line, the TOE passes the data to the Controller Board. If the
received data is not fax data, the TOE discards it.
By the above, FDP_IFC.1 (Subset information flow control) and FDP_IFF.1 (Simple security attributes) are
satisfied.
7.1.9 SF.GENUINE
At every TOE start -up, th e MFP Control Software Verification Function verifies the integrity of the MFP
Control Software that is installed in the FlashROM.
Copyright (c) 2009,2010 RICOH COMPANY, LTD. All Rights Reserved.
Network Communication Data Protection Function
Protection Function for Intrusion via Telephone Line
MFP Control Software Verification Function
Page 74 of 80
Network Communication